Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We have a web portal setup on Java spring framework. It running on tomcat app server. Portal is served through apache web server connected to tomcat through JK connector. Entire portal is HTTPS enabled using 443 port of apache. Apache version is : Apache/2.4.2 (Unix). it is the latest stable version of apache web server.

Whenever we try to upload files more than 128 KB into the portal, We are facing 413 error:

Request Entity Too Large The requested resource /teamleadchoachingtracking/doFileUpload does not allow request data with POST requests, or the amount of data provided in the request exceeds the capacity limit.

In the apache error log we get the following errors:

AH02018: request body exceeds maximum size (131072) for SSL buffer
AH02257: could not buffer message body to allow SSL renegotiation to proceed

We did search over google and there were suggestions to put SSLRenegBufferSize as some high value like 10MB. Based on these suggestions, we had put the following entry in virtualhost section of httpd config file:

<Directory "/teamleadchoachingtracking/doFileUpload/">
SSLRenegBufferSize 10486000
</Directory>

But still the error persists. Also we have specified SSLVerifyClient none, but still renegotiation is happening.

This is a very inconsistent and frustrating error. Any help will be highly appreciated. Many thanks in advance.

share|improve this question
    
Have you seen the bug thread on Apache bugzilla's site? There are a few other workarounds discussed that might be of use to you. issues.apache.org/bugzilla/show_bug.cgi?id=39243 –  HopelessN00b Aug 21 '12 at 17:42
    
I did go through all that before posting here. Even after following those suggestions issue still persists. At the end of all these SSLRenegBufferSize param was the official fix from apache which we tried. That did not solve it. –  tushar Aug 21 '12 at 18:17
add comment

2 Answers 2

I managed to solve it by putting certain configuration in apache httpd.conf file. Here is the sample configuration:

Location "/calibration"
 SSLRenegBufferSize 10486000
/Location

Where Location is Location directive. It has be enclosed with xml style angle brackets. Earlier i was not giving correct configuration. Key is the exact URL location which is causing http 413 error. In the location directive exact URL location needs to be given. SSLRenegBufferSize is the param which specifies the max buffer size in bytes in case a renegotiation happened. I had set it to 10 MB. Apache default is 128KB.

share|improve this answer
add comment

This problem occurs during an SSL renegotiation. In addition to setting the renegotiate buffer size on Apache to a very high number you have a few other options:

  • Configure your (virtual) host to use only a single authentication scheme to avoid renegotiation all together
  • Use a client that supports HTTP 1.1 Expect Header

See http://stackoverflow.com/questions/14281628/ssl-renegotiation-with-client-certificate-causes-server-buffer-overflow

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.